Fake Bank Login Page
What Happened
A 24-year-old woman in Pune received an SMS claiming her SBI account was frozen. She clicked the link and entered her debit card details, CVV, and OTP on a near-perfect copy of the SBI login page. ₹87,000 was drained from her account within 3 minutes.
🎯 How She Was Targeted
- Smishing (SMS phishing) with urgent account-freeze scare
- Spoofed domain: `sbi-online-verification[.]in`
- Fake SSL padlock + cloned bank branding to appear legitimate
- Pressure to act within 10 minutes or account be blocked permanently
⚠️ Warning Signs
- !Unexpected SMS/Email asking to 'verify KYC' immediately
- !URL slightly misspelled or with hyphens/extra words
- !Website asks for OTP, CVV, or ATM PIN on a login screen
- !Sender address is a free email (Gmail/Outlook) not a bank domain
✅ How to Stay Safe
- ✓Never click links in unsolicited SMS. Open the official app yourself.
- ✓Check the URL bar: legitimate banks use `*.bank` or their own branded domain
- ✓Banks NEVER call/SMS asking for OTP, CVV, or PIN
- ✓Report suspicious SMS to 1930 and screenshot as evidence → save to Evidence Locker
